$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer File: 231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer (raw, json) Hash identifier: A1HdjBHI1eQH7MN2EU/kaK7tTa7+aW88oRtK9HoRHF4= Subject key identifier: 23:1C:7B:0E:36:57:E4:AD:8C:A4:3B:B2:D7:94:79:74:BC:69:47:DC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0B9A38DD60F3CF3EF5EC79715CE4AC34326963A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:06:02 +0000 Certificate not after: Tue 04 Mar 2025 18:11:02 +0000 Subordinate resources: AS: 269956 IP: 189.126.8.0/23 IP: 2803:fae0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9a:38:dd:60:f3:cf:3e:f5:ec:79:71:5c:e4:ac:34:32:69:63:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:06:02 2024 GMT Not After : Mar 4 18:11:02 2025 GMT Subject: CN=231C7B0E3657E4AD8CA43BB2D7947974BC6947DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:ab:55:05:ff:79:ac:4f:6c:a8:be:47:8d: ca:6b:73:d1:cd:f2:59:26:7c:06:35:e4:43:54:ac: 74:e1:bc:54:60:f6:07:3f:25:30:02:36:f6:68:72: 02:b5:fd:9f:57:b7:a4:37:41:89:13:62:b5:54:16: 45:2d:92:8a:12:fd:e0:f6:8b:8d:68:2b:12:d4:a0: a5:d3:61:12:e4:05:cb:c6:11:06:02:e2:f1:75:24: 9a:42:6b:ce:26:f4:66:de:6d:48:50:3e:d8:ac:5a: 14:b3:88:fd:a9:ae:c8:3d:96:fb:6d:32:3d:55:8e: af:ce:99:10:e3:d0:9a:91:d9:11:90:98:df:3a:a9: 7c:c8:27:2a:f2:e6:6b:07:af:6c:db:17:4f:e0:10: ed:f7:30:68:59:46:4a:80:44:a3:db:7a:94:cb:53: de:a4:d3:cb:e1:c9:90:9d:3e:1b:80:6a:4b:a2:6f: 33:19:b0:8f:31:51:a2:85:9c:14:68:a2:72:e2:81: f8:04:12:40:d3:40:85:37:5b:2f:d1:a9:3e:1a:a5: c5:bd:2b:d6:65:96:29:ff:29:92:7b:c1:29:da:62: 09:2e:ae:08:3d:f2:83:ec:d5:2c:b5:09:11:c9:94: d9:64:20:27:65:08:78:4f:43:49:cf:a4:35:3a:80: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:1C:7B:0E:36:57:E4:AD:8C:A4:3B:B2:D7:94:79:74:BC:69:47:DC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.126.8.0/23 IPv6: 2803:fae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269956 Signature Algorithm: sha256WithRSAEncryption 7f:42:cc:6c:97:98:ce:6c:05:b9:c4:ce:1e:c0:f1:3b:8a:77: 94:63:bb:71:a7:3d:7b:5c:f4:78:08:ba:52:c0:81:01:c0:34: 60:00:1d:04:22:bb:9c:0c:3e:31:16:b4:b1:c4:89:71:18:40: 49:b0:15:bb:71:e8:3b:76:11:aa:16:51:12:d1:21:34:40:60: b4:23:b1:1d:4b:2c:77:a5:ae:00:fd:42:29:c2:58:33:1d:f5: cf:59:1a:c9:cf:39:1e:5e:1b:f0:66:fd:b0:b2:38:97:60:02: d5:5a:05:8e:e5:33:d3:51:2b:dd:40:d3:e4:e1:29:3b:1e:db: d6:23:c7:80:b3:3b:9e:38:6b:54:67:57:a9:7a:d1:f5:cf:65: e1:59:7e:4d:7c:2f:4c:c4:2e:ef:e5:98:c3:72:0a:6c:7e:d7: 8f:3e:7b:d4:6c:da:76:c6:2e:50:6a:1d:f2:49:c3:e8:94:a8: 34:5a:c6:dd:3a:46:84:06:3b:04:dc:74:1c:d3:03:9f:be:7e: 4b:46:e2:ca:7b:1c:ed:2b:5f:8e:5c:65:a4:6d:17:f3:12:4d: b4:02:5b:cd:ef:79:20:aa:41:a8:52:09:bd:eb:f3:50:9e:32: 79:c8:eb:c9:88:1e:91:e2:2c:72:3c:e1:50:73:16:e6:1a:f0: 40:b0:7e:ca -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUC5o43WDzzz717HlxXOSsNDJpY6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA2MDJaFw0yNTAzMDQxODExMDJaMDMxMTAvBgNV BAMTKDIzMUM3QjBFMzY1N0U0QUQ4Q0E0M0JCMkQ3OTQ3OTc0QkM2OTQ3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3atVBf95rE9sqL5Hjcprc9HN 8lkmfAY15ENUrHThvFRg9gc/JTACNvZocgK1/Z9Xt6Q3QYkTYrVUFkUtkooS/eD2 i41oKxLUoKXTYRLkBcvGEQYC4vF1JJpCa84m9GbebUhQPtisWhSziP2prsg9lvtt Mj1Vjq/OmRDj0JqR2RGQmN86qXzIJyry5msHr2zbF0/gEO33MGhZRkqARKPbepTL U96k08vhyZCdPhuAakuibzMZsI8xUaKFnBRoonLigfgEEkDTQIU3Wy/RqT4apcW9 K9Zllin/KZJ7wSnaYgkurgg98oPs1Sy1CRHJlNlkICdlCHhPQ0nPpDU6gI5lAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjHHsONlfkrYyk O7LXlHl0vGlH3DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0RBRDAzNkMyNzM2RTVDQURBNDMzMUJC QUUxOTdCQjJFQUYyRTA2Mjk0NDZBNEMyNDRCMzUwQ0ZFODNBRDUxNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DREFEMDM2QzI3MzZFNUNBREE0MzMxQkJBRTE5N0JCMkVBRjJFMDYyOTQ0 NkE0QzI0NEIzNTBDRkU4M0FENTE3LzAvMjMxQzdCMEUzNjU3RTRBRDhDQTQzQkIy RDc5NDc5NzRCQzY5NDdEQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBvX4IMA0EAgAC MAcDBQAoA/rgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQehDANBgkqhkiG9w0B AQsFAAOCAQEAf0LMbJeYzmwFucTOHsDxO4p3lGO7cac9e1z0eAi6UsCBAcA0YAAd BCK7nAw+MRa0scSJcRhASbAVu3HoO3YRqhZREtEhNEBgtCOxHUssd6WuAP1CKcJY Mx31z1kayc85Hl4b8Gb9sLI4l2AC1VoFjuUz01Er3UDT5OEpOx7b1iPHgLM7njhr VGdXqXrR9c9l4Vl+TXwvTMQu7+WYw3IKbH7Xjz571GzadsYuUGod8knD6JSoNFrG 3TpGhAY7BNx0HNMDn75+S0biynsc7StfjlxlpG0X8xJNtAJbze95IKpBqFIJvevz UJ4yecjryYgekeIscjzhUHMW5hrwQLB+yg== -----END CERTIFICATE-----Generated at Fri Oct 25 13:07:22 2024 by rpki-client on console-fra.rpki-client.org